Vulnerability Spotlight: Lexmark Perceptive Document Filters Code Execution Bugs
Summary: Cisco Talos disclosed two code execution vulnerabilities in Lexmark Perceptive Document Filters, the libraries used to parse many file formats. CVE-2017-2821 is a use-after-free issue tied to the 'GfxFont' variable in PDF parsing, and CVE-2017-2822 causes a function call to a corrupted DCTStream in image rendering, writing user-controlled data to the stack; both are triggered by specially crafted PDF documents and were found by Marcin Noga and Lillyth Wyatt.
Bottom line: Both bugs sit in a parsing library built to ingest large volumes of untrusted files, so a single crafted PDF reaching that pipeline can turn document processing into code execution - and Talos notes its Snort rules (42313-42314, 42399-42400) may change as more vulnerability information emerges.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2017-2821CVE-2017-2822
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026